$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft File: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft (raw, json) Hash identifier: ludoBynTrMWIPayx8BoPMU01vacZNskE8VXhiwvXcKM= Subject key identifier: CB:03:EF:2A:2A:CB:D5:EB:4A:37:0D:CA:55:46:EE:B4:DE:BA:D9:66 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 2E8C59C3DB2266E2C34D199296FC49E22284FC66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft Manifest number: 7B Signing time: Tue 03 Jun 2025 04:42:38 +0000 Manifest this update: Tue 03 Jun 2025 04:37:38 +0000 Manifest next update: Fri 06 Jun 2025 09:03:38 +0000 Files and hashes: 1: E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl (hash: /t/6DK8e7MCCTh9PKk3qAiwz+r14hYy8MKJsNNsAaP8=) 2: 3130332e3136392e3230302e302f32342d3234203d3e20313339333634.roa (hash: ZMgOkSZ3/ZMH9Cw4ynFe0bUbUUV7q98dOonQwTKrkes=) 3: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (hash: 4yHX21WHUo392SGtXw+8bz/7pbXAzszyaOP+6cp8BDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 09:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8c:59:c3:db:22:66:e2:c3:4d:19:92:96:fc:49:e2:22:84:fc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Jun 3 04:37:38 2025 GMT Not After : Jun 6 09:03:38 2025 GMT Subject: CN=CB03EF2A2ACBD5EB4A370DCA5546EEB4DEBAD966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:dd:55:6c:36:4f:15:36:3e:4d:72:3e:96: a8:1c:e7:a4:61:88:32:96:c1:1e:ce:d1:7d:a0:0a: eb:61:8d:18:ab:84:e0:7c:a0:ec:cb:9c:e0:a8:37: 30:27:88:8a:00:f1:fe:e9:3f:92:6e:4c:07:bc:b2: 30:59:0d:ec:94:ad:1a:1e:86:55:2b:03:e3:2e:fc: a4:21:ff:ae:da:72:97:bd:da:c0:af:09:a3:58:65: 2c:0f:72:ca:b8:1c:52:7f:43:55:0e:65:bd:e7:ac: 85:5c:69:a5:75:ab:01:b2:43:e3:ed:c0:43:12:b0: 96:0e:f9:b4:0c:bd:67:c8:12:57:66:20:4c:1d:2b: 42:0e:09:ae:70:b8:5d:a0:98:24:6c:86:82:35:1c: 42:2c:a9:88:04:dd:59:d5:8a:70:85:92:3b:ed:0b: f0:10:16:6c:c9:be:36:bd:1c:c3:84:98:bc:e2:f9: f0:84:f9:24:c5:28:41:62:c3:64:d2:4a:31:2a:c5: f5:ad:7d:0b:cf:d2:b5:9a:18:36:29:f6:b8:6e:44: 97:a4:78:85:d3:1d:4e:25:cc:71:a3:ac:86:e8:66: 71:3b:af:94:13:3b:f2:a6:39:25:62:5b:95:07:55: dd:25:b9:23:b8:49:6e:d6:82:4b:d8:ff:d7:c5:2d: da:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:03:EF:2A:2A:CB:D5:EB:4A:37:0D:CA:55:46:EE:B4:DE:BA:D9:66 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2f:b4:71:66:c3:04:05:c0:2a:37:c5:29:c4:df:8c:84:33: 7a:1f:4e:1e:52:57:0f:f6:a7:4f:e9:67:b4:b3:45:cf:60:1d: 67:c7:65:26:9a:42:31:d9:db:57:3d:af:15:79:82:97:a5:22: 96:f3:fa:8f:67:89:a0:d6:58:d5:24:4e:b2:b6:5d:02:dd:6e: 81:01:d8:77:82:ff:63:da:38:5b:25:6f:64:53:6b:75:71:0c: c5:5b:81:39:8c:2b:ee:ba:14:bf:9f:e5:62:da:d0:2c:86:79: ad:a8:e6:55:9b:22:15:8b:e4:d0:9d:54:2d:6a:0b:6b:db:fe: 5e:bb:3c:c6:26:06:14:13:4f:5e:7b:c8:9c:0b:46:c2:05:18: d4:44:f2:12:dd:b2:f4:7b:79:27:d4:f9:fb:a6:9c:7d:0e:8d: 2d:7d:e9:64:df:25:d6:0d:ae:11:7b:26:43:87:08:6a:47:fa: 80:f0:3c:9e:5e:cc:35:15:23:c0:36:56:18:01:da:d7:eb:69: 07:60:78:a4:9a:52:38:4a:ce:55:d8:58:d8:dd:98:6f:2b:16: cd:f3:6f:6b:a7:3b:ff:65:50:f5:d3:18:ec:d8:50:b4:7e:e6: ac:58:8f:cc:34:00:b0:b5:59:2f:09:05:d6:36:c5:8b:9a:1a: 1e:3f:b6:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULoxZw9siZuLDTRmSlvxJ4iKE/GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNTA2MDMwNDM3MzhaFw0yNTA2MDYwOTAzMzhaMDMxMTAvBgNV BAMTKENCMDNFRjJBMkFDQkQ1RUI0QTM3MERDQTU1NDZFRUI0REVCQUQ5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBd1VbDZPFTY+TXI+lqgc56Rh iDKWwR7O0X2gCuthjRirhOB8oOzLnOCoNzAniIoA8f7pP5JuTAe8sjBZDeyUrRoe hlUrA+Mu/KQh/67acpe92sCvCaNYZSwPcsq4HFJ/Q1UOZb3nrIVcaaV1qwGyQ+Pt wEMSsJYO+bQMvWfIEldmIEwdK0IOCa5wuF2gmCRshoI1HEIsqYgE3VnVinCFkjvt C/AQFmzJvja9HMOEmLzi+fCE+STFKEFiw2TSSjEqxfWtfQvP0rWaGDYp9rhuRJek eIXTHU4lzHGjrIboZnE7r5QTO/KmOSViW5UHVd0luSO4SW7WgkvY/9fFLdp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywPvKirL1etKNw3KVUbutN662WYwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOGFhYzMtMDA5NC00MjFmLWEy MDEtMjRkODIwZTJhYjNkLzAvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5 QTJDMzZDRUU2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkvtHFmwwQFwCo3xSnE34yEM3ofTh5SVw/2 p0/pZ7SzRc9gHWfHZSaaQjHZ21c9rxV5gpelIpbz+o9niaDWWNUkTrK2XQLdboEB 2HeC/2PaOFslb2RTa3VxDMVbgTmMK+66FL+f5WLa0CyGea2o5lWbIhWL5NCdVC1q C2vb/l67PMYmBhQTT157yJwLRsIFGNRE8hLdsvR7eSfU+fumnH0OjS196WTfJdYN rhF7JkOHCGpH+oDwPJ5ezDUVI8A2VhgB2tfraQdgeKSaUjhKzlXYWNjdmG8rFs3z b2unO/9lUPXTGOzYULR+5qxYj8w0ALC1WS8JBdY2xYuaGh4/tg8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:07 2025 by rpki-client